Files
nextcloud-mail/lib/SMTP/SmtpClientFactory.php
Christoph Wurst cc7c5926d3 feat: support user migration
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2025-12-16 19:06:15 +01:00

92 lines
2.8 KiB
PHP

<?php
declare(strict_types=1);
/**
* SPDX-FileCopyrightText: 2018 Nextcloud GmbH and Nextcloud contributors
* SPDX-License-Identifier: AGPL-3.0-or-later
*/
namespace OCA\Mail\SMTP;
use Exception;
use Horde_Mail_Transport;
use Horde_Mail_Transport_Smtphorde;
use Horde_Smtp_Password_Xoauth2;
use OCA\Mail\Account;
use OCA\Mail\Exception\ServiceException;
use OCA\Mail\Support\HostNameFactory;
use OCP\IConfig;
use OCP\Security\ICrypto;
class SmtpClientFactory {
/** @var IConfig */
private $config;
/** @var ICrypto */
private $crypto;
/** @var HostNameFactory */
private $hostNameFactory;
public function __construct(IConfig $config,
ICrypto $crypto,
HostNameFactory $hostNameFactory) {
$this->config = $config;
$this->crypto = $crypto;
$this->hostNameFactory = $hostNameFactory;
}
/**
* @param Account $account
*
* @return Horde_Mail_Transport
*/
public function create(Account $account): Horde_Mail_Transport {
$mailAccount = $account->getMailAccount();
$decryptedPassword = null;
if ($mailAccount->getOutboundPassword() !== null) {
$decryptedPassword = $this->crypto->decrypt($mailAccount->getOutboundPassword());
}
$security = $mailAccount->getOutboundSslMode();
$params = [
'localhost' => $this->hostNameFactory->getHostName(),
'host' => $mailAccount->getOutboundHost(),
'password' => $decryptedPassword,
'port' => $mailAccount->getOutboundPort(),
'username' => $mailAccount->getOutboundUser(),
'secure' => $security === 'none' ? false : $security,
'timeout' => (int)$this->config->getSystemValue('app.mail.smtp.timeout', 20),
'context' => [
'ssl' => [
'verify_peer' => $this->config->getSystemValueBool('app.mail.verify-tls-peer', true),
'verify_peer_name' => $this->config->getSystemValueBool('app.mail.verify-tls-peer', true),
],
],
];
if ($account->getMailAccount()->getAuthMethod() === 'xoauth2') {
try {
$oauthAccessToken = $account->getMailAccount()->getOauthAccessToken();
if ($oauthAccessToken === null) {
throw new ServiceException('Missing access token for xoauth2 account');
}
$decryptedAccessToken = $this->crypto->decrypt($oauthAccessToken);
} catch (Exception $e) {
throw new ServiceException('Could not decrypt account access token: ' . $e->getMessage(), 0, $e);
}
$params['password'] = $decryptedAccessToken; // Not used, but Horde wants this
$params['xoauth2_token'] = new Horde_Smtp_Password_Xoauth2(
$account->getEmail(),
$decryptedAccessToken,
);
}
if ($account->getDebug() || $this->config->getSystemValueBool('app.mail.debug')) {
$fn = 'mail-' . $account->getUserId() . '-' . $account->getId() . '-smtp.log';
$params['debug'] = $this->config->getSystemValue('datadirectory') . '/' . $fn;
}
return new Horde_Mail_Transport_Smtphorde($params);
}
}